Sam Curry modem masterclass, PHP threat to Windows Servers, Calls for AI safety Bug Bounties – ethical hacker news roundup

This monthly bulletin summarizes recent security research and disclosures, highlighting multiple high-impact vulnerabilities (including an OpenSSH RCE, a PHP CGI/XAMPP RCE, and modem management flaws potentially affecting millions), an iOS OAuth authentication-code theft issue, NoSQL injection research, and reporting of an alleged telco malware campaign; patches and ongoing investigation or mitigation are noted for several items.